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DETAILED ACTION 

This final action is in response to the amendment of 03/12/2007. Claims 1-24 are pending and 
have been considered as follows. 

Examiner's Note 

1 . The Applicant appears to be attempting to invoke 35 U.S.C. 1 12 6 th paragraph in Claims 
5-8, 17, & 20 by using "means-plus-function" language. However, the Examiner notes that the 
only "means" for performing these cited functions in the specification appears to be computer 
program modules. While the claims pass the first test of the three-prong test used to determine 
invocation of paragraph 6, since no other specific structural limitations* are disclosed in the 
specification, the claims do not meet the other tests of the three-prong test. Therefore, 35 U.S.C. 
1 12 6 th paragraph has not been invoked when considering these claims below. 

Claim Rejections - 35 USC §102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
, subsection of an application filed in the United States only if the international application designated the United 
• States and was published under Article 2 1(2) of such treaty in the English language. 
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3. Claims 1-24 are rejected under 35 U.S.C. 102(e) as being anticipated by Hetzler (US- 

7134139-B2). 

Claims 1, 5, & 9: 

Hetzler discloses a method, an apparatus, and a program for prohibiting iSCSI discovery sessions 
comprising, 

- "Once the above-described process has resulted in issued tickets, the logic of FIG. 3 can 
be invoked to access data. Commencing at block 54, a login request is received from a 
requesting client. The request includes a valid client ticket.sub.l along with (B, LU . . . ). 
At decision diamond 56 it is determined by the cache device 12 whether (B, LU, 
ticket.sub.l) are all valid, and if not, the logic ends at state 58. Otherwise, the logic 
proceeds to block 60" (i.e. "receiving an iSCSI login request; determining whether & 
payload of said iSCSI login request contains a "SessionType ^Discovery" key/value 
pair") [column 5 lines 26-33]. 

- "Commencing at block 34, a LAN client requests an authentication ticket, denoted client 
ticket.sub.l, by sending a ticket request to the cache device 12. The ticket request 
includes a request to access (B, LU . . . ), wherein "B" represents the relevant bus (e.g., an 
iSCSI bus) and the "LU"s represent logical units in the data storage 14 that can be 
associated with the requesting client or with the sought-after blocks. At decision diamond 
36 the device 12 determines whether authentication failed, i.e., whether the LAN client is 
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not authorized access to the cache data storage 14. If authentication fails, the ticket 
request is denied and the process ends at block 38" (i.e. 4t when discovery sessions are 
disabled and said iSCSI login request contains said "SessionType=Discovery" keylvalue 
pair, rejecting said iSCSI login request") [column 4 lines 59-67 & column 5 lines 1-3]. 
Claims 2, 6, & 10: 

Hetzler discloses a method as in Claim 1 above, an apparatus as in Claim 5 above, and a program 
as in Claim 9 above for prohibiting iSCSI discovery sessions further comprising, 

- "Otherwise, the cache device 12 must obtain a current cache authentication ticket, 

denoted ticket.sub.2, and in that case the logic would flow to block 44, wherein the cache 
device 12 requests the cache ticket.sub.2 from the WAN server holding the requested 
data. If authentication at the WAN server fails as determined at decision diamond 46, the 
logic flows to block 48 to return "fail" and deny access. If this happens, the cache device 
12 informs the LAN client. If authentication is successful, however, the logic flows from 
decision diamond 46 to block 50, wherein the WAN server grants the cache ticket.sub.2 
to the cache device 12. Then, the cache device 12 issues a corresponding client 
ticket.sub.l to the requesting client at block 52. The client ticket.sub.l can be stored in 
the local storage 14 if desired" (i.e. "iSCSI login request is rejected with a iSCSI status- 
class of "Target Error" and status detail of "Session Type not Supported") [column 5 lines 
12-25]. 
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Claims 3, 7, & 11: 

Hetzler discloses a method as in Claim 1 above, an apparatus as in Claim 5 above, and a program 
as in Claim 9 above for prohibiting iSCSI discovery sessions further comprising, 

- "The logic commencing at block 70 is then repeated as necessary for read/write requests. 
At block 70, a read or write request is received at the cache device 12 from a LAN client. 
The request includes (B, LU, block), wherein "block" is the specific data block or blocks 
sought to be read (or written)" (i.e. "declaring a session type on said iSCSI login 
request") [column 5 lines 47-52]. 

Claims 4, 8, & 12: 

Hetzler discloses a method as in Claim 1 above, an apparatus as in Claim 5 above, and a program 
as in Claim 9 above for prohibiting iSCSI discovery sessions further comprising, 

- "The logic commencing at block 70 is then repeated as necessary for read/write requests. 
At block 70, a read or write request is received at the cache device 12 from a LAN client. 
The request includes (B, LU, block), wherein "block" is the specific data block or blocks 
sought to be read (or written)" (i.e. "when a session type is not explicitly declared on said 
iSCSI login request, assuming a session type is not a discovery session and specifying a 
specific target") [column 5 lines 47-52]. 

Claims 13, 17, & 21: 

Hetzler discloses a method, an apparatus, and a program for prohibiting iSCSI target stealth 
operation comprising, 
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- "If desired, additional functionality can be provided. For example, the cache device 12 
can automatically discover new clients 28 and servers 22 on the network. Moreover, the 
cache device 12 can limit the number of write requests to a set of clients 28, either in data 
volume or rate of requests, to essentially establish a storage quota management system. 
Further, sets of administrative specifications can be changed by authenticated servers 22 
and authenticated clients 28. If desired, storage blocks in the local storage 14 can be 
locked transparently to the clients 28 by the above-described mechanism of associating 
tickets with logical units, to facilitate sharing of the cache 12 among the clients 28. Still 
further, the tickets can have expirations, and a ticket that has expired or will soon expire 
can be automatically reapplied for based on an alert generated by the cache 12 or the 
granting server 22. In one non-limitirig example, the network connections 20, 26 can use 
encryption. The data cache device 12 can, in accordance with cache principles known in 
the art, anticipate client requests based on historical requests and adapt accordingly, e.g., 
by appropriately placing related data close together in the storage 14, to thereby improve 
client performance" (i.e. "providing a setting to individually enable/disable at least one of 
discovery sessions, SLP, iSNS, ICMP, and SNMP; and when said discovery session, said 
SLP, and said iSNS are all disabled, providing a warning that an initiator must be 
statically configured to locate a target on an iSCSI entity") [column 6 lines 16-38]. 
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Claims 14, 18,&22: 

Hetzler discloses a method as in Claim 13 above, an apparatus as in Claim 17 above, and a 
program as in Claim 21 above for prohibiting iSCSI target stealth operation further comprising, 
- "If desired, additional functionality can be provided. For example, the cache device 12 
can automatically discover new clients 28 and servers 22 on the network. Moreover, the 
cache device 12 can limit the number of write requests to a set of clients 28, either in data 
volume or rate of requests, to essentially establish a storage quota management system. 
Further, sets of administrative specifications can be changed by authenticated servers 22 
and authenticated clients 28. If desired, storage blocks in the local storage 14 can be 
locked transparently to the clients 28 by the above-described mechanism of associating 
tickets with logical units, to facilitate sharing of the cache 12 among the clients 28. Still 
further, the tickets can have expirations, and a ticket that has expired or will soon expire 
can be automatically reapplied for based on an alert generated by the cache 12 or the 
granting server 22. In one non-limiting example, the network connections 20, 26 can use 
encryption. The data cache device 12 can, in accordance with cache principles known in 
the art, anticipate client requests based on historical requests and adapt accordingly, e.g., 
by appropriately placing related data close together in the storage 14, to thereby improve 
client performance" (i.e. "enable/disable is distributed throughout a management 
application") [column 6 lines 16-38]. 
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Claims 15, 19, & 23: 

Hetzler discloses a method as in Claim 13 above, an apparatus as in Claim 17 above, and a 
program as in Claim 21 above for prohibiting iSCSI target stealth operation further comprising, 

- "Otherwise, the cache device 12 must obtain a current cache authentication ticket, 
denoted ticket.sub.2, and in that case the logic would flow to block 44, wherein the cache 
device 12 requests the cache ticket.sub.2 from the WAN server holding the requested 
data. If authentication at the WAN server fails as determined at decision diamond 46, the 
logic flows to block 48 to return "fail" and deny access. If this happens, the cache device 
12 informs the LAN client. If authentication is successful, however, the logic flows from 
decision diamond 46 to block 50, wherein the WAN server grants the cache ticket.sub.2 
to the cache device 12. Then, the cache device 12 issues a corresponding cliefit 
ticket.sub.l to the requesting client at block 52. The client ticket.sub.l can be stored in 
the local storage 14 if desired" (i.e. "warning is provided to an administrator") [column 5 
lines 12-25]. 

Claims 16, 20, & 24: 

Hetzler discloses a method as in Claim 13 above, an apparatus as in Claim 17 above, and a 
program as in Claim 21 above for prohibiting iSCSI target stealth operation further comprising, 

- "Otherwise, the cache device 12 must obtain a current cache authentication ticket, 
denoted ticket.sub.2, and in that case the logic would flow to block 44, wherein the cache 
device 12 requests the cache ticket.sub.2 from the WAN server holding the requested 
data. If authentication at the WAN server fails as determined at decision diamond 46, the 
logic flows to block 48 to return "fail" and deny access. If this happens, the cache device 
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12 informs the LAN client. If authentication is successful, however, the logic flows from 
decision diamond 46 to block 50, wherein the WAN server grants the cache ticket.sub.2 
to the cache device 12. Then, the cache device 12 issues a corresponding client 
ticket.sub.l to the requesting client at block 52. The client ticket.sub.l can be stored in 
the local storage 14 if desired" (i.e. ct when all discovery mechanisms are disabled, 
providing said warning to a user") [column 5 lines 12-25]. 

Response to Arguments 
4. Applicant's arguments filed 03/12/2007 have been fully considered but they are not 
persuasive. The applicant recites "receiving an iSCSI login request; determining whether a 
' payload of said iSCSI login request contains a "'SessionType=Discovery' key/value pair" which 
after consideration the examiner has determined that it is equivalent to the recitation of the 
reference Hetzler "a login request is received from a requesting client. The request includes a 
valid client ticket along with (B, LU. . .)" [column 5], The reference Hetzler, recites his invention 
for use in an iSCSI network, thus "a login request" would have to be an iSCSI login request 
since conflicting communications protocols cannot successfully interact without using a common 
language or some type of interfacing conversion to the same protocol. "A valid client ticket 
along with (B, LU...)" contains the information which authenticates/validates the client, which 
may include elements such as a username/password, encryption key pair, hash coded identifier, 
or any other unique information that can identify a client, which includes the element as 
disclosed by the applicant "'SessionType=Discovery' key/value pair." 
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5. In response to applicant's argument that the references fail to show certain features of 
applicant's invention, it is noted that the features upon which applicant relies (i.e. iSCSI network 
is required to return a list of all targets on the network entity and all of the portal groups 
associated with each target) are not recited in the rejected claim(s). Although the claims are 
interpreted in light of the specification, limitations from the specification are not read into the 
claims. See In re Van Geuns, 988 F.2d 1 181, 26 USPQ2d 1057 (Fed. Cir. 1993). 

Conclusion 

6. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). A shortened statutory period for reply to this final action 
is set to expire THREE MONTHS from the mailing date of this action. In the event a first reply 
is filed within TWO MONTHS of the mailing date of this final action and the advisory action is 
not mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of the 
advisory action. In no event, however, will the statutory period for reply expire later than SIX 
MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Examiner Oscar Louie whose telephone number is 571-270-1684. 
The examiner can normally be reached Monday through Thursday from 7:30 AM to 4:00 PM. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, James Myhre, can be reached at 571-270-1065. The fax phone number for Formal or 
Official faxes to Technology Center 2100 is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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